Netware Webserver - QuickFinder on OESsp2: managing access to files and folders

Author

QuickFinder on OESsp2: managing access to files and folders

Ricardo Rodriguez

2007-06-14, 1:12 pm

Hi all,

After using QuickFinder running in NW6.0 and NW6.5 boxes, we are now
moving to Linux OESsp2.

I've never understood well how the QF sing in form works. Security
Settings contents in the concerned documentation is not clear to me. I
can read there about Authorisation by Directory and Authentication
Realm String, but in this new, for me, Linux environment I am far from
understand how to manage access to files in different locations of the
Linux file-system. Much less how to manage the access by using a web
server!

As stated for other users in this list, it is useful to allow users to
access their files by using a simple web read access.

I've been able to index all files contained in the /home/[username],
/usr/novell/sys/[username], Simias related folders (all the ifolder
created by the users) and all NetMail folders.

So, the point is now how to grant access to each user to his/her
folders/files.

It is not a problem that the results show entries belonging to other
users, but the files must be only accessible for people with granted
rights.

Please, could you point me in the right direction? Is it possible to
achieve this goal?

Thank you so much for your help,

--
Ricardo Rodríguez
Your XEN ICT Team

Anders Gustafsson

2007-06-14, 1:12 pm

Ricardo Rodriguez,
> It is not a problem that the results show entries belonging to other
> users, but the files must be only accessible for people with granted
> rights.
>
> Please, could you point me in the right direction? Is it possible to
> achieve this goal?
>
Yes. I have never tried it on linux though. There is a setting,
however, under security, that governs what will be shown. Default is to
show all, but it can be set so that an authenticated user only sees
hits he has the right to see.

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop
Pedago, The Aaland Islands (N60 E20)

Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement

Using VA 5.51 build 315 on Windows 2000 build 2600

Ricardo Rodriguez

2007-06-14, 7:12 pm

Thanks, Anders,

> Yes. I have never tried it on linux though. There is a setting,
> however, under security, that governs what will be shown. Default is
> to show all, but it can be set so that an authenticated user only
> sees hits he has the right to see.

Here are the security settings of the concerned server:

http://mire.environmentalchange.net...ecuritySettings
..jpg

There is another location where security options could be set: the
advanced options for each index. Here the security settings for any of
our file system indexes:

http://mire.environmentalchange.net...ndexSecuritySet
tings.jpg

Whatever user is logged in the server, even with no one, the search
results are exactly the same: the same entries, the same hits number.

For instance, look for Centla here...

https://mire.environmentalchange.ne...h/SearchServlet

You will get 21 hits but can't access no of them. All this documents
are located in a Simias folder, an iFolder created by a member of the
team.

Neither you, nor this guy, nor me as server administrator are able to
access this files unless I modify the access settings of this directory
in the Apache configuration file. For instance:

Alias /simias "/var/opt/novell/ifolder3/simias/SimiasFiles"
<Directory "/var/opt/novell/ifolder3/simias/SimiasFiles">
Options Indexes MultiViews
AllowOverride None
Order allow,deny
Allow from x.x.x.x
</Directory>

Thus, only box x.x.x.x has access to this results.

So, I am a bit of a mess. A number of different factors are playing
here: QF settings, Apache settings, eDirectory settings,... PAM? LUM?
The point is that I am not able to understand how, and what, users
rights on a file or folder can be used here.

Please, let me know if I can send you more examples or perform any test
that can serve to clarify the situation. Thanks!

All the best,

--
Ricardo Rodríguez
Your XEN ICT Team

Anders Gustafsson

2007-06-15, 7:12 am

Looks right though. Let me ask Novell.

- Anders Gustafsson, Engineer, CNE6, ASE
NSC Volunteer Sysop
Pedago, The Aaland Islands (N60 E20)

Novell does not monitor these forums officially.
Enhancement requests for all Novell products may be made at
http://support.novell.com/enhancement

Using VA 5.51 build 315 on Windows 2000 build 2600

Ricardo Rodriguez

2007-06-26, 7:11 pm

Anders Gustafsson escribió:
> Looks right though. Let me ask Novell.
>
> - Anders Gustafsson, Engineer, CNE6, ASE
> NSC Volunteer Sysop
> Pedago, The Aaland Islands (N60 E20)
>
> Novell does not monitor these forums officially.
> Enhancement requests for all Novell products may be made at
> http://support.novell.com/enhancement
>
> Using VA 5.51 build 315 on Windows 2000 build 2600
>

Hi Anders,

Following Marcel's reply on my "navigating the folder tree" entry I've
also realized that this thread is also out of place. In any case,
please, it is for user that you have not gotten a reply from Novell yet
but, please, could you give me any clue about the cause of the problem?
Thanks!

Best regards,

--
Ricardo Rodríguez
Your XEN ICT Team

AndersG

2007-06-30, 7:11 am

I am on holiday, sorry. I will look into this when I get back.

Ricardo Rodriguez

2007-07-01, 7:11 am

AndersG wrote:

> I am on holiday, sorry. I will look into this when I get back.

Thanks, Anders! Sorry for bothering you! Enjoy!

--
Ricardo Rodríguez
Your XEN ICT Team